Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.

Comments:EventID.Net
As per Microsoft: "The Metabase Update agent failed to rename a key in the Metabase. This may be a temporary error. If so, the Metabase will eventually recover from this error and the Metabase Update agent will update the Metabase properly". See MSEX2KDB and ME843093 for additional information about this event.

Anne Jan Elsinga
If the problem persists, verify that the IIS Admin Service is running properly. This event is sometimes linked to EventID 1040 from the same source.